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"'™™npr'^™"'''''^'"'^°''^™''«*T.ON ABOUT 
THE PERFORMANCE OF A COMMUNICATIONS NETWORK 

BACKGROUND OF THE INVENTION 

Field of the Invention 

Description of Related Art 

belween respective locations f """"^^ eommunlcation 

refined as a point to po« non^edlcated «,..„„^„ J"^' ^'"^ " 
DWe.n. parts of a VPN may be owned by the en.en,rtse and a canler or ISP 

problem occurs, it can be diffimiit t« w«* • Mu«"uy. wnen a 

drfficult to determine whether the fault is at the 
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be d*„« to a«^„. Thte can «su,. In ^ a ,ol.«on to «,e plen, 
wNe me parties a,ue over who is ^sponsible, as ne«Her wants to 

'«»u'cestoprob.em™so,*nOisno.,he.rp™b.en,. To use. of «,e VPN 
5 services are delayed. ' 

When a p^blem does ahse, « may go undetootod by tt,e canier or entorpdse 
War. custom. Of .He enferp^ .ay expeHenoe deg.daton In nel^; 
pertonnance. Thus. csto™. may becon« awa« of a p.ob.en, bel6,« I, Is 

or unti appear ,n one of «,e f«ed sports produced by fte ca,rter T„|s 
2 -u-s . de^yed p^blen, detocbon, delayed altooa^on of respons^ 
and delayed resolution of the problem. 

Even after problem responsibility has been assigned, prtor art prac8ce often 
.0 revew networt, pertbnnance reports to detennine se^ce agreem^ 
■ola^ns to detennine who is responsible to pay any penai«es and !^ 
pe^^t^s are to be applied. Th. is a tedious tasK invoMng reviewing re^^ 
2^ may be severel pages k,ng. to detennine se^ agreement io2, 
a^ re^e^ng complex legal agreements to detonnine penaftles assocated 
wrth such v»lations. This can delay penally payments. 

in View 0, the above, the ln«„to. of the present invention have recogn^ a 
naea tor a networt< management tool to altow an ente^se to rem^ vie^ 
2'«ere^ wrth a VPN and more partlcularty to view and interal J 
^levam portons of the canters or ISP-s networt. on which the VPN is n,nnl„g 
^ for real time analysis of networt< pertom^nce. Z 
present invention addresses this need. 

SUMMARY OF THE INVENTION 

The pre^nt invention addresses the above need by providing a method 
apparetus and computer readable media for providing insLotions t 



CA 02287844 1999-11-01 



-3- 



20 



25 



30 



directing a programmable device to provide lnfom,ation about the 
perlbmrance of a network in real time, the^by enabling «al time analysis of 
netwo* data and real time monitoring of network perfomiance. 

in one embodiment, this is achieved by producing a c»mposito representata 
5 for causing a display to show both a pictorial representaUon of the 
communications networi, and a representation of data received in real time 
ftom the networi. Th. composite representatton may be transmitted for 
remote display purposes or may be used to control a display locally for local 
display Of the composite representation. Preferebly, received data Is Included 
in the composite representation In such a manner that the data will be shown 
in an area separate from the pictorial representatfen on the display The 
composite representation preferably includes a menu of appllcaflons 
selectable by the user, such applicatfons being responsible for obtaining and 
fom,a«,ng the data in the composite representation for display in an easily 
readable manner and for providing access to a database for stored data 
associated the networi<, threugh l«»,s. for example. In genera, 
apphcations provide for preblem notiflcation. perfonnance monitoring and 
troubleshooting, event trackhg and notification and service level agreement, 
compliance monitoring and violation reporting. 

The present Invention prevides a way of prevldlng networi, data relaUng to 
both the earner and the enterprise in real time and allows a user to select data 
important to the user for monitoring, to detemii™, the perfomiance of the 
networi<. in addition, it provWes Immediate notiflcalion of the entity 
rasponsible for a preblem. resulting in faster mobilization of apprepriate repair 
pereonnel. to locate and repair the preblem and to allow the networi, to 
resume nom,al operatton. In addition, real time monitoring of operator 
selectable networic parameters allows netv«Hk administrators to adjust the 
networi, for opUmum pe,fom«nc«, in real «me. The present inventton also 
correlates preblems to service level agreement violations aNowing real t^e 
nowcatfon of such violations and indicaf ons of penalBes associated with such 
Violations. 
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Other aspects and features of the present invention will t)ecome apparent to 
those ordinarily skilled in the art upon review of the following description of 
specific emt)odiments of the invention in conjunction with ttie accompanying 
figures. 

5 BRIEF DESCRIPTION OF THE DRAWINGS 

In drawings which illustrate emlwdiments of tiie invention, 

Figure 1 is a schematic representation of a virtual private networit, 
according to a first embodiment of the invention. 

Figure 2 is a block diagram of a data server, according to ttie first 
10 embodiment of the invention. 

Figure 3 is a schematic representation of tfie transformation of data into a 
display representation, according to ttie first embodiment of ttie 
invention. 

Figure 4 is a schematic representation of a page as displayed in response 
to a composite representation produced by ttie apparatus shown • 
in Figure 2. 



15 " 



20 



Figures is a schematic representation of modules stored in a main 
memory of the data server shown in Figure 2. 

Figures is a pictorial representation of ttie communications networic as 
seen In a pictorial representation display window of tiie page 
shown in Figure 4. 

Figure 7 is a tabular representation of data shown in a data portion of ttie 
page shown in Figure 4. 

Figures is a schematic representation of a perfbnnance criteria query 
2^ template which is shown in ttie data portion of ttie page shown in 

Figure 4. 
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Figure9 is a schematic representation of a perfomiance data summary 
displayed in the data portion of the page shown in Figure 4. 

Figure 10 Is a schematic representation of a correlated data display which 
would be seen in the data portion of the page shown in Figure 4. 

Figure 11 is a schematic representation of a display of bandwidth allocation 
for a plurality of applications mnning to/from a tennination 
equipment on the network, as would be seen in the data portion of 
the page shown in Figure 4. 

Figure 12 is a schematic representation of customizable monitored network 
events as would be seen in the data portion of the page shown in 
Figure 4. 

Figures 13A and 13B are first and second halves of a schematic representation 
of an input template for receiving user input for selecting 
parameters to be tracked and used to notify an operator, as would 
be seen in the data portion of the page shown in Figure 4. 

Figure 14 is a schematic representation of a display template showing 
summarized service level agreements (SLA) relating to the 
network shown in Figure 1 . as would be seen in the data portion of 
the page shown in Figure 4. 

Figure 15 is a schematic representation of specific SLA agreement details. 

for one temrilnation equipment as would be seen In the data 
portion of the page shown in Figure 4. 

DETAILED DESCRIPTION 

As shown In Figure 1, a virtual private communications network for a fictional 
enterprise customer Is shown generally at 10. The customer has a plurality 
of locations, each having respective temilnation equipment 12, 14. 16. 18, 20 
and 22 respectively. A tennination equipment may be a Centrex system, for 
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example. at a location for distributing telephone calls to callers and for 
distributing data to computers at or associated with the location. 

In this embodiment, the virtual private networit further includes a earner 
networi< 24 provided by a fictitious telecommunications company. 
Altematively. the earner networit 24 may be supplied by an internet services 
provider. The camer networic 24 in the embodiment shown, or alternative 
networit supplied by an internet services provider, provide for communications 
to be transmitted from temiination equipment 12-22 to any other termination 
equipment. 

Still referring to Figure 1, each of the temiination equipment 12-22 includes a 
computer running a first data gathering program for monitoring various 
perfonnance parameters reflecting how well Information is being transmitted 
to and from the carrier networi< 24. Each tennination equipment 12-22 also 
includes a database 26 at the termination equipment, although the databases 
26 may altematively be at locations remote from their respective termination 
equipment. Each first data gathering program collects data in real time and 
*® database 26 at the termination equipment. In addition, 
the carrier networit 24 Includes a computer running a second data gathering 
program which monitors data transmissions between respective locations and 
stores data representing the perfonnance of the canier networi< in a canier 
networic database 28 stored at an administration location of the carrier 
network, or remotely. 

In this embodiment, administration functions for the customer are earned out 
at a centralized Infomnation Technology IT department location or at an IT 
department location associated with temiination equipment 16, for example. 
Tennination equipment 16 is configured with a data server 30 operable to 
communicate with respective tennination equipment 12-22 to access their 
respective equipment databases 26 to obtain networic data gathered by 
respective first data gathering programs. In addition, the data server 30 is 
operable to communicate with the canier networic 24 to access the earner 
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network database 28 to obtain data gathered by the second data gathering 
program at the carrier. 

Referring to Figure 2, the IT department data server is shown generally at 30 
and includes a processor 32 operable to communicate with a bus 34 and main 
memory 36 through a host PCI cache/bridge 38. In this specification, the 
word "processor" is used to include any programmable device or any circuit or 
combination of circuits capable of perfonning the functions described herein. 
In this embodiment the processor 32 includes a single microprocessor located 
at the data server 30. Altematively, however, the processor 32 may include a 
microprocessor remote from the data server, or a combination of one or more 
microprocessors at the data server and one or more microprocessors remote 
therefrom, for example. Or, the processor 32 may include one or more 
microcontrollers, other integrated circuits, or logic gate arrays, for example. 
Other such variations will be appreciated by one of ordinary skill in the art 
upon reading this specification and are not considered to depart from the 
scope of the present invention. 

The bus 34 enables the processor 32 to communicate with a LAt4 adapter 40 
for connection to other equipment at that location or at least associated with 
the tenmination equipment 16, and to enable the processor to communicate 
20 with a small computer systems interface (SCSI) host bus adapter 42 for 
enabling communications with a disc drive 44, a tape drive 46 and a CD ROM 
drive 48. The processor 32 executes routines stored in the main memory 36 
for controlling the SCSI host bus adapter 42 to receive programs or program 
modules from various computer readable media including a diskette 50 
25 inserted into the disc drive 44, a CD ROM 52 inserted into the CD ROM drive 
48 or a tape 54 inserted into the tape drive 46, for example. Altematively, or 
in addition the computer readable media may include a local area network 
accessible through the LAN adapter 40. for example. 

The bus 34 further enables the processor 32 to communicate with an 
30 expansion bus interface 60, a graphics adapter 62 and an audfo/video adapter 



CA 02287844 1999-11-01 



-8- 



15 



20 



25 



30 



64. The graphics adapter 62 and the audio^ideo adapter 64 are connected to 
a display 66 for displaying graphics and information according to program 
modules stored in the main memory 36. 

The expansbn bus interface 60 further allows the processor 32 to 
> communicate with a keyboard and mouse adapter 68. a modem 70 and a 
temporary memory 72. The modem 70 facilitates communication between the 
processor 32 and the earner network 24 shown In Figure 1 and provides 
access to yet another computer readable medium, which may be a server or a 
remote computer, for example, from which data and/or programs or program 
modules may be downloaded for storage in the main memory 36. 

Refemng to Figures 2 and 3. the processor 32 of the IT department data 
server 30 is programmed by codes stored in the main memory 36 to receive 
data from respective data servers at respective temiination equipment 12-22 
shown in Figure 1. Preferably, such data is received through the modem 70 
and stored in temporary memory 72. The codes stored in the main memory 
for directing the processor to do this may be received from codes on diskette 
50. tape 54. or CD ROM 52 or codes received via LAN adapter 40 or via 
modem 70, for example, 

SWbrty, me processor S2 is p™g,ammed by codes in the main memon, 
(Which may be received as described above) to receive data from the carrier 
network database 28 shown m Figure 1. Ibr storage in the temporary memory 
72. Further codes in the main memory 36 program the prtx^esso, 32 to 
produce a composite representation which may be a hypertext mark-up 
language (HTML) page file, for example, for interacting with a browser n.n by 
the pmcessor 32 to control the audioArkleo adapter 64 to cause the display 66 
to produce a display image as shown in Figure 4, in response to the 
composite representatton. In general, the composite representetion may be 
any composite representeton recognizable by a display progmm or display 
pmgram module for praducing a display image of the type descnbed herein 
Such composite representetions are preferably we^enabled to provkfe any 
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time, anywhere, any platfonm usage of the display Image. This can be done 
with a web-page or web application which could be written in JAVA, 
Javascript, XML, or HTML, for example. 

Referring to Figure 4. the display image includes a pictorial representation 80 
5 and a data portion 82 and preferably includes a menu 84 of network 
management applications for selecting different data representations to 
appear in the data portion 82. Each of these may appear in separate 
windows, or "frames" on a display screen. In effect, therefore, refening back 
to Figure 2, the IT data server 30 produces a graphical representation for 

10 producing a pictorial representation of the data network, it receives data 
relating to the network, it produces a data representation for displaying at 
least some of the received data and it produces a composite representation 
including both the graphical representation and the data representation, the 
composite representation pemnitting simultaneous display of the pictorial 

15 representation and at least some of the received data. In the embodiment 
shown, it also includes a presentation of a menu in the corhposite 
representation. 

Refenring to Figures 2 and 5, the organization of the main memory 36 is 
shown. The main memory includes locations for storing an overview module 
20 90, a navigational module 92, a network summary module 94 and application 
modules, including an event viewer module 96. a perfonnance module 98, a 
service level agreement (SLA) monitor module 100, a notifications module 
102, a net simulator module 104, an expert system module 106 and an area 
108 for storing further applications. 

25 Overview Module 

In this embodiment, the overview module 90 contains program codes for 
directing the processor 32 to produce a composite representation for 
producing a generic display of tiie type shown in Figure 4. The navigation 
module 92 programs the processor 32 to Include within the composite 
30 representation a display representation for displaying the menu of applications 
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84 shown in Figure 4 and to receive user input through the keyboard and 
mouse adapter 68 to allow a user to navigate through different application 
modules 96-104. The applications modules 96-104 each program the 
processor 32 to gather data from the temporary memory 72 holding data 
5 received from respective termination equipment 12-22 and the carrier network 
24 shown in Figure 1 and to produce data representations for inclusion in the 
composite representation for display In the data portion 82 produced by the 
overview module 90. 

As shown in Figure 6, the pictorial representation produced by the composite 
10 representation is shown generally at 80 and includes a circular object 110, for 
example having a predefined, but programmable, set of attributes including 
color. For example, the object 110 may be shown in grey, red, orange, blue 
or yellow in this embodiment to indicate proper functioning and problems 
associated respective with network equipment associated with the object 110. 
15 Red would be used to indicate that the service has been intenupted, for 
example. 

Similarly, the pictorial representation includes a plurality of rectangular 
objects, only one of which is labeled 112, which also have respective display 
attributes including colors such as grey, red, orange, blue and yellow for 
20 indicating functionality of the associated object. Each of the rectangular 
objects 112 depicts corresponding termination equipment. In this 
embodiment the object labeled 112 represents termination equipment 14 
shown in Figure 1. 

In addition, the pictorial representation 80 includes links, only one of which is 
25 labeled 114, connecting the rectangular objects to the circular object 110. 
Each of these links 114 also has associated display attributes, which in this 
embodiment may be one of the above indicated colors for indicating 
functionality of the associated link. 

Under the control of the oven/iew module 90 shown in Figure 5, the processor 
30 32 shown in Figure 2 is directed to consider the data stored in temporary 
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memory 72 and compare It against known parameters which may be preset or 
stored in the temporary memory 72 by the user, through a configuration 
program (not shown) stored in the main memory 36 and operable to execute 
on the processor 32. 

5 Refening to Figures 2 and 6. assuming the real time data stored in the 
memory 72 meets the criteria of the pre-stored parameters, each of the links 
114, the circular object 110 and the rectangular objects 112 is shown in grey 
to indicate that the earner network, links and regional termination equipment is 
fully operative or functioning within acceptable perfonrnance limits. If, 

10 however, data relating to the perfbmnance of any of the links 114 do not meet 
the pre-stored criteria, the con^sponding link is shown with a different color 
attribute to cause the link to appear in blue, red, orange or yellow, for 
example. Similariy, if any of the data associated with a particular region fails 
to meet the pre-stored criteria, the corresponding rectangular object 112 is 

15 shown with a color attribute, depending upon the type of problem. Similariy, if 
the data associated with the carrier network does not meet the predefined 
criteria, the circular object 110 associated with the canier network is shown 
with a color attribute depending upon the type of problem. In this manner 
problematic network components are shown in color and thus are 

20 distinguished from functioning network components, which are shown in grey, 
to provide real time information about the functioning, or perfonrnance of the 
networtc. Colored components may also be accompanied by an icon or shape 
alterations for redundant indication of a problem to allow for colorblindness, 
poor lighting or poor display quality, for example. 

25 The overview module 90 further Includes codes for directing the processor 32 
to present icons on the pictorial representation 80, one of which is shown at 
116. The icon is preferably configured to provide a pictorial representation of 
a type of perfomiance degradation being experienced by the object with which 
it is associated. In cooperation with a browser running at the processor 32, 

30 the user can click on the Icon 116 to obtain more infomiation relating to the 
problem causing perfomnance degradation as the icon 116 is hyperiinked to a 
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display module (not shown) which presents the data stored in memory 72, 
representative of the ennor. 

In addition, each rectangular object 112 is associated with hyperlinks to 
further information associated with the associated region such as a further 
5 geographical breakdown of the region, by city for example. In the 
embodiment shown the rectangular object 118 associated with region 4 for 
example shows hyperlinks 120, 122 and 124 to data stored in either main 
memory 36 or temporary memory 72 associated with respective cities. The 
overview module may further place Indicia such as shown at 126 adjacent 

10 con^esponding city hyperlinks to indicate that further infomriation relating to 
equipment associated with the city is available. In particular, this may be 
used to show an equipment or service inventory associated with the city, for 
example. A hyperlink accessible from this indicia 126 directs the user to an 
appropriate location in the main memory 36 or temporary memory 72 to 

15 provide such further information. 

Event Viewer Module 

As shown in Figure 7, an example of a data display produced by a data ^ 
representation produced by the event viewer module 96, according to this 
embodiment of the invention, is shown generally at 130. The data display 130 

20 includes a row/column format for providing an IT professional with details 
regarding problems, such as the geographical location of the problem, circuit 
ID. networi< service affected, relative perfomiance metric, applications 
impacted by the problem, responsibility designation, IP department contact 
person, log time of the problem, estimated time to repair and service level 

25 agreement indicator. Altematively, different fields may be pre-defined for 
display. The data to fill the fields may come from the temporary memory 72 or 
the main memory 36. or altematively may be obtained through the modem 70 
or LAN adapter 40 or any of the devices communicating through the SCSI 
adapter 42. 
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Performance Module 

Figure 8 shows a performance criteria display 132 produced from a data 
representation produced by the perfomnance module 98. In cooperation with 
the browser, a user may enter input for querying the data stored in the 
5 temporary memory 72 to cause the perfomiance module to produce a 
representation for displaying real time or historical perfomiance of at least one 
component of the network. In particular, a user may specify data to initiate a 
query of the data in the temporary memory 72 based on specific perfomiance 
metrics between specific geographical locations of the VPN, Alternatively, the 
10 user may initiate performance queries on the basis of services running over 
the VPN, such as an ATM or frame relay service for example, or on the basis 
of the applications running over the VPN such as email and file transfer 
protocol (FTP) applications, for example. 

After receiving the relevant query, the perfomiance module 98 produces a 
15 representation for producing a display, an example of which is shown at 134 

in Figure 9 wherein a summary of FTP parameters is shown, including ent)rs, 

latency, utilization discards, bit rate, VPN used and total FTP sources In use. 

Those parameters may have been previously calculated at a earner computer 

and/or a customer computer, or may be calculated at the IT department 
20 computer 30 from raw data supplied by the aforementioned customer 

database 26 and/or carrier network database 28. Other parameters may 

alternatively or additionally be shown. 

In addition, the display includes an icon 136 for Indicating to a user that the 
rules-based perfomiance analysis expert system module 106 stored in the 

25 main memory is available for conrelating network performance data and for 
producing a representation for displaying such con-elated data. The icon 
cooperates with the browser to invoke the expert system module 106 to 
pemiit the expert system module to generate data from raw data received 
from the customer databases 26 and/or carrier networic database 28 to enable 

30 the processor 32 to produce a representation for producing a graphical 
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display, an example of which is shown at 138 in Figure 10. for displaying the 
coaelated data. 

In addition, the performance module 98 includes instructions for directing the 
processor 32 to detemriine. from raw data obtained from the customer 
database 26 and/or the carrier network database 28, bandwidth allocation 
associated with at least one application running on the network and for 
directing the processor to produce a representation - of the bandwklth 
allocation to produce a display of bandwidth allocation as shown at 140 in 
Figure 11. In the embodiment shown, the display of bandwidth allocation 
shows bandwidth allocation for a plurality of applications running to/from a 
termination equipment the earner network and provides a graphical display of 
bandwidth allocated to each application thereby showing relationships 
between bandwidth allocation of various applications. In this embodiment, the 
perfonnance module 98 further includes instmctions for similariy causing 
predicted and observed bandwidth allocation to be graphically displayed. 

Notifications Module 

The notifications module 102 includes codes for directing the processor 32 to 
monitor network events detemnined from raw data from the customer 
databases 26 and/or the earner networi< database 28 and produce a 
representation for displaying at least one monitored network event, and 
preferably a plurality of monitored networi< events. A display produced by 
such representation is shown generally at 142 in Figure 12. The perfonnance 
module provides the capability to automatically monitor or track specific VPN 
events specified by an operator such as outages, perfonnance parameters, 
and allocation bandwidth usage, for example. When a customer defined 
event has been detected, the customer can configure the system to 
automatically notify a specific individual or individuals via a number of different 
notification methods, such as a pager or email, of the occunrence of the event. 

In this embodiment the notifications module allows the customer to monitor 
the occunrence of three kinds of events on the VPN: outages, performance 
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threshold violations, and application bandwidth usage violations. Outage 
monitoring provides the capability to monitor for loss of communication 
between any node of the VPN and the VPN itself. Performance monitoring 
provides the capability to set perfomriance thresholds for any perfonnance 
5 metric on the VPN and monitor these thresholds for violation. Application 
bandwidth usage monitoring provides the capability to set VPN bandwidth 
allocation thresholds for any application running at one termination equipment 
on the VPN and monitor these thresholds for violation. 

In this embodiment the representation produced by the notifications module 

10 102 produces a tab-based user interface that provides the user access to the 
three event categories for tracking and notification. Each tab is associated 
with a list of current events that have been configured for monitoring and 
notification. For application based events, the list includes five fields, 
including an application field 144 indicating the type of application being 

15 monitored, a percent of VPN field 146 showing tiie VPN bandwidth threshold 
in percentage terms (above which a notification will be triggered), a time of 
alert field 148 indicating the time delay before notification of threshold 

. violation^ is- sent , out,..a« site afield 150 indicating the VPN tributary^ being^^ 

monitored, and a notification type field 152 indicating the type of notification to 

20 be used. In conjunction with the browser, users can remove items from the 
list by pressing a delete from list button 154 In tiie bottom righthand comer of 
the window. Configuring an application for bandwidth usage tracking and 
notification is done by selecting an edit list button 156 in the bottom righthand 
comer of the window. 

25 Pressing the edit list button 156 expands the application window to allow the 
user to enter the appropriate infomiation for monitoring bandwidth usage of a 
specific application, as shown at 180 in Figure 13. As an illustrative example, 
video application tracking and notification for tiie occurrence of excessive 
usage of the video application can be configured using this display. To do 

30 this, a location where the video application is to be monitored is entered in the 
notification settings for location field 182. The application to be monitored is 
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identifled by selecting a video button 184 from among a piurality of select 
application buttons 185. The VPN bandwidth threshold is set at 35% using a 
pulldown menu bar 186. Finally, the user identifies the time of alert and 
notification type using the pulldown menu bars 187 and 188. When all this 
infonnation is entered an add to list button 189 is pressed and the new 
application event to be tracked is added to the list. In this manner the user 
can configure the system to monitor video traffic such that whenever video 
traffic exceeds 35% of the allowable traffic in the monitored tributary, the user 
who configured the event tracking is notified according to the parameters 
entered. 

SLA Monitor Module 

Finally, the SLA monitor module 100 includes codes for directing the 
processor 32 to produce a representation for causing a display as shown at 
190 in Figure 14 enabling a user to select which of a plurality of service level 
agreements is to be considered. In this embodiment, the SLA monitor module 
100 presents the user with an option to show violated service level 
agreements or to show all service level agreements pre-stored in the main 
memory 36 or temporary memory 72. The SLA monitor module 100 may be 
defaulted to show violated service level agreements as shown in Figure 14. 
The representation also causes the display of an eight field list including a 
service field 192 for identifying the network service covered by the service 
level agreement, a location field 194 identifying the specific VPN termination 
equipment governed by the service level agreement, a metric field 196 
showing the particular sen^ice level agreement metric that has been violated, 
when applicable, an agreed field 197 for indicating an agreed level of the 
metric, a delivered field 198 showing the cument status of the SLA metric in 
the metric field, when applicable, a penalty field 200 showing the relevant 
penalty for violation of the service level agreement, an impacting field 202 for 
showing the applications being affected by the sen/ice level agreement 
violation, when applicable, and finally, a tenns of agreement field 204 which 
shows the date the SLA agreement went into effect. 
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The terms of agreement field 204 is hyperiinked to an electronic summary of 
the SLA agreement details, an example of a display of such summary being 
shown at 210 in Figure 15. In this embodiment, the detailed summary 
includes a list of the metrics that are monitored by the SLA monitor module 
5 100, wherein each metric is listed in association with the SLA threshold level 
and the penalty associated with violating that threshold level. When a 
violation occurs, the relevant list item is highlighted in the SLA details list, in 
addition to the notification provided in the SLA monitor. 

Refen^ing back to Figure 4, it will be appreciated that through the use of the 
10 navigation module, the user can select any number of a plurality of 
applications for producing information to appear in the data portion 82 of the 
display produced by the composite representation. At the same time, the user 
is presented with a pictorial representation of the virtual private network which 
provides the user with an easily understandable representation. The present 
15 invention provides caniers or intemet services providers with the means to 
provide a customer-oriented unified virtual private network management 
solution to most of their enterprise VPN customers in a low cost manner. 

In an alternative embodiment, the computer shown in Figure 2 may be located 
on the premises of the carrier and may include a web server for providing 

20 HTML files, for example, as representations for producing the graphical 
displays described above at remote sites such as any, some, or each of the 
tennination equipment 12-22 at the customer's premises. This simplifies the 
computer system requirements at the customer's premises and can be offered 
by the canier or ISP, for example, as a subscription service providing the user 

25 access to infomnation in a predefined format. 

While specific embodiments of the invention have been described and 
illustrated, such embodiments should be considered illustrative of the invention 
only and not as limiting the invention as construed in accordance with the 
accompanying claims. 
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THE EMBODIMENT OF THE INVENTION IN WHICH AN EXCLUSIVE 
PROPERTY OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS:: 

1. A method of providing information about the performance of a 
communications network, the method comprising: 

a) producing a graphical representation for producing a pictorial 
representation of said communications network; 

b) receiving data relating to said network; 

c) producing a data representation for displaying at least some of 
said data; and 

d) producing a composite representation including said graphical 
representation and said data representation to enable 
simultaneous display of said pictorial representation and said at 
least some of said data. 

2. The method as claimed in claim 1, further comprising simultaneously 
displaying said pictorial representation and said at least some-ot^aid 
data, in response to said composite representation. 

3. The method as claimed in claim 1 wherein producing said composite 
representation comprises producing said composite representation to 
cause said pictorial representation and said at least some of said data 
to be separated from each other when displayed. 

4. The method as claimed in claim 1 further comprising executing a 
networi< perfomnance evaluating application to produce said data 
representation. 

5. The method as claimed in claim 4 further comprising producing a 
representation of a menu of available performance evaluating 
applications, including said representation of said menu in said 
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composite representation and invoking at least one of said available 
performance evaluating applications in response to user input. 

6. The method as claimed in claim 5 wherein producing said 
representation of said menu comprises producing said representation 

5 of said menu such that said composite representation causes said 

menu to be separated from both said pictorial representation and said 
at least some of said data when displayed. 

7. The method as claimed in claim 1 wherein receiving data further 
comprises operating a data server to obtain said data from a plurality of 

10 network components in said network. 

8. The method as claimed in claim 4, wherein executing said network 
performance evaluating application further comprises producing a 
representation of a problem notification representing a problem with 
said network, in response to data indicating a problem and including 
said representation of said problem notification in said composite 
representation. 

9. The method as claimed in claim 8 further comprising displaying said 
problem notification in response to said representation thereof, on said 
pictorial representation. 

20 10. The method as claimed in claim 9 further comprising changing a 
display attribute of a component associated with said problem and 
represented in said pictorial representation, to cause said problem 
notification to be displayed. 

11. The method as claimed in claim 10 wherein changing a display 
25 attribute further comprises representing at least part of said component 

with a color different from a color used to represent components of said 
network not associated with said problem. 



15 
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12. The method as claimed in claim 8 further comprising including in said 
composite representation a representation of an icon for association 
with a problematic component of said network to indicate that more 
information about said problem is available. 

5 13. The method as claimed in claim 12 further comprising invoking at least 
one of said performance evaluating applications in response to user 
input received in association with said icon to include in said composite 
representation further information about said problem. 

14. The method as claimed in claim 12 further comprising accessing a 
10 database in response to user input received in association with said 

icon, to obtain data relating to the impact of said problem on said 
network and including said data relating to said impact in said 
composite representation. 

15. The method as claimed in claim 14 wherein accessing said database 
15 further comprises obtaining data relating to a potential solution to said 

problem. 



16. The method as claimed in claim 4 wherein executing further comprises 
executing a performance evaluating application for producing a 
representation for causing display of real time performance of at least 

20 one component of said network. 

17. The method as claimed in claim 4 wherein executing further comprises 
executing a perfonmance evaluating application for producing a 
representation for causing display of historical performance of at least 
one component of said networi^ and including said representation for 

25 causing display of historical performance in said composite 

representation. 



18. 



The method as claimed in claim 17 wherein executing further 
comprises receiving user input for querying for data relating to at least 
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one performance metric of said network, producing a representation for 
causing display of said data relating to said at least one performance 
metric in response to said user input and including said representation 
for causing display of said data relating to said at least one 
performance metric in said composite representation. 

The method as claimed in claim 17 wherein executing further 
comprises receiving user input for querying for data relating to at least 
one service running on said network, pnDducing a representation for 
causing display of said data relating to said at least one service in 
response to said user input and including said representation for 
causing display of said data relating to said at least one service in said 
composite representation. 

The method as claimed in claim 17 wherein executing further 
comprises receiving user input for querying for data relating to at least 
one application ainning on said network, producing a representation for 
causing display of said data relating to said at least one application and 
including said representation for causing display of said data relating to 
said at least one application in said composite representation. 

The method as claimed in claim 4 wherein executing further comprises 
executing a ailes-based perfonnance analysis expert system for 
correlating networic perfonnance data and for producing a 
representation for displaying said correlated networic performance data 
and including said representation for displaying said correlated network 
performance data in said composite representation. 

The method as claimed in claim 4 wherein executing further comprises 
detemnining bandwidth allocation associated with at least one 
application running on said network, producing a representation of said 
bandwidth allocation for causing display of said bandwidth allocation 
and including said representation of said bandwidth allocation in said 
composite representation. 
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23. The method as claimed in claim 4 wherein executing further comprises 
determining bandwidth allocation associated with a plurality of 
applications running to/from temnination equipment on said network, 
producing a representation for graphically displaying said bandwidth 

5 allocation and including said representation for graphically displaying in 

said composite representation. 

24. The method as claimed in claim 23 wherein executing further 
comprises producing said representation for graphically displaying said 
bandwidth allocation to cause reference and observed bandwidth 

10 allocation to be graphically displayed. 

25. The method as claimed in claim 4 wherein executing further comprises 
monitoring network events, producing a representation for causing 
display of at least one monitored network event and including said 
representation for causing display in said composite representation. 

15 26. The method as claimed in claim 25 further comprising signaling a user 
when a monitored network event has occurred. 

27. The method as claimed in claim 4. wherein executing further comprises 
determining service level performance metrics, comparing said service 
level performance metrics to predefined sen^ice level perfonmance 

20 requirements, producing a representation for causing display of an 

indication of service level performance metrics which do not meet said 
predefined service level performance requirements and including said 
representation for causing display in said composite representation. 

28. The method as claimed in claim 27 further comprising producing said 
25 representation for causing display of said indication of service level 

performance metrics such that a predefined penalty associated with 
failure to meet said predefined service level performance requirements 
is displayed in association with said indication of service level 
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performance metrics which do not meet said predefined service level 
perfomnance requirements. 

An apparatus for providing infonmation about the performance of a 
communications network, the apparatus comprising: 

a) memory for storing a pictorial representation of said 
communications networi<; 

b) a receiver for receiving data relating to said networic; and 

c) a processor for producing a composite representation including 
a graphical representation of said pictorial representation and a 
data representation for displaying at least some of said data 
relating to said networic, for use by a device to simultaneously 
display said pictorial representation and said at least some of 
said data. 

The apparatus as claimed in claim 29, further comprising a display 
controlled by said processor, for displaying said pictorial representation 
and said at least some of said data in response to said composite 
representation. 

The apparatus as claimed in claim 29 further comprising a transmitter 
for transmitting said composite representation to a renriote device 
operable to display said pictorial representation and said at least some 
of said data in response to said composite representation. 

The apparatus as claimed in claim 29 wherein said processor is 
programmed to produce said composite representation such that said 
pictorial representation and said at least some of said data are 
separated from each other. 
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33. The apparatus as claimed in claim 29 wherein said processor is 
programmed to execute a network performance evaluating application 
to produce said data representation. 

34. The apparatus as claimed in claim 33 further comprising a user input 
5 device in communication with said processor and wherein said 

processor is programmed to produce a menu of available perfomiance 
evaluating applications and to invoke at least one of said available 
performance evaluating applications in response to user input received 
at said user input device. 

10 35. The apparatus as claimed in claim 34 wherein said processor is 
programmed to produce said composite representation such that said 
composite representation further comprises said menu and such that 
said menu will be displayed separated from both said pictorial 
representation and said at least some of said data. 

15 36. The apparatus as claimed in claim 29 wherein said receiver further 
comprises a data server operable to obtain said data relating to said 
network from a plurality of network components in said network.-^ ' ' 

37. The apparatus as claimed in daim 29, wherein said processor is 
programmed to determine whether or not data received at said receiver 

20 indicates that there is a problem with a networic component and if so, to 

include in said composite representation a problem notification. 

38. The apparatus as claimed in claim 37 wherein said processor is 
programmed to cause said composite representation to be produced 
such that said problem notification will be displayed on said pictorial 

25 representation. 

39. The apparatus as claimed in daim 38 wherein said processor is 
programmed to set display attributes for components represented by 
said pictorial representation and to change a display attribute of a 
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component associated with said problem and represented in said 
pictorial representation, to provide said problem notification. 

The apparatus as claimed in claim 39 wherein said processor is 
programmed to represent components of said network in color and to 
produce said composite representation such that at least part of said 
component associated with said problem is shown in a color different 
from a color used to represent components of said networi< not 
associated with said problem. 

The apparatus as claimed in claim 37 wherein said processor is 
programmed to produce said composite representation to cause an 
icon to be displayed in association with a problematic component of 
said network. 

The apparatus as claimed in claim 41 further comprising a user input 
device and wherein said processor is programmed to invoke at least 
one perfomiance evaluating application in response to user input 
received at said user input device in association with said icon to 
include in said composite representation further information about said" 
problem, for display. 

The apparatus as claimed in claim 42 wherein said processor is 
programmed to access a database in response to user input received 
in association with said icon, to obtain data relating to the impact of 
said problem on said networi< and to display said data relating to said 
impact. 

The apparatus as claimed in daim 43 wherein said processor is 
programmed to obtain data relating to a potential solution to said 
problem. 

The apparatus as claimed in claim 33 wherein said processor Is 
programmed to execute a perfomnance evaluating application for 
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productng said data representation such that it causes real time 
perfomiance data of at least one component of said network to be 
displayed. 

The apparatus as claimed in claim 33 wherein said processor is 
programmed to execute a perfomiance evaluating application for 
producing said data representation such that it causes historical 
perfomiance of at least one component of said network to be 
displayed. 

The apparatus as claimed in claim 46 further comprising a user input 
device and wherein said processor is programmed to receive user 
input from said user input device, to query for data relating to at least 
one perfomiance metric of said network and to include in said 
composite representation a representation for displaying said data 
relating to said at least one perfonmance metric. 

The apparatus as claimed in claim 46 further comprising a user input 
device and wherein said processor is programmed to receive user 
input from said* user input device, to query for data relating to arieast "' 
one service running on said network and to include in said composite 
representation a representation for displaying said data relating to said 
at least one service. 

The apparatus as claimed in daim 46 further comprising a user input 
device and wherein said processor is programmed to receive user 
input from said user input device, to query for data relating to at least 
one application running on said networi<, and to include in said 
composite representation said data relating to said at least one 
application. 

The apparatus as claimed in claim 33 wherein said processor is 
programmed to execute a rules-based performance analysis expert 
system for correlating networic perfomiance data and programmed to 
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include in said composite representation a representation for displaying 
said correlated network performance data. 

The apparatus as claimed in claim 33 wherein said processor is 
programmed to detemriine bandwidth allocation associated with at least 
one application running to/from a termination equipment on said 
network and to include in said composite representation a 
representation of said bandwidth allocation, for display. 

The apparatus as claimed in claim 33 wherein said processor is 
programmed to detemnine bandwidth allocation associated with each of 
a plurality of applications running on said network and to include in said 
composite representation a representation for graphically displaying 
said bandwidth allocation. 

The apparatus as claimed in claim 52 wherein said pnDcessor is 
programmed to produce said representation for graphically displaying 
such that predicted and actual bandwidth allocation are graphically 
displayed. 

The apparatus as claimed in claim 33 wherein said processor is 
programmed to monitor network events and to include in said 
composite representation a representation for displaying at least one 
monitored network event. 

The apparatus as claimed in claim 54 further comprising a transmitter 
for transmitting a signal to a user when a monitored network event has 
occurred. 

The apparatus as claimed in daim 33, wherein said processor is 
programmed to detemiine service level performance metrics, to 
compare said service level perfonmance metrics to predefined service 
level perfonmance requirements and to include in said composite 
representation a representation for displaying an indication of service 
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level performance metrics which do not meet said predefined service 
level performance requirements. 

The apparatus as claimed in claim 56 wherein said processor is 
programmed to include in said composite representation a 
representation causing a predefined penalty associated with failure to 
meet said predefined service level perfonnance requirements to be 
displayed in association with said indication of service level 
performance metrics which do not meet said predefined service level 
performance requirements. 

A computer readable medium for pnDviding instruction codes executable 
by a programmable device, for directing said programmable device to: 

a) produce a graphical representation for producing a pictorial 
representation of a communications network; 

b) receive data relating to said network; 

c) produce a data representation for displaying at least some of said 
~ data; ana ^^^^'^ " ' 

d) produce a composite representation including said graphical 
representation and said data representation to enable 
simultaneous display of said pictorial representation and said at 
least some of said data. 

A computer data signal embodied in a earner wave, the signal 
comprising respective code segments for directing a programmable 
device to: 

a) produce a graphical representation for producing a pictorial 
representation of a communications network; 

b) receive data relating to said networic; 
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c) produce a data representation for displaying at least some of said 
data; and 

d) produce a composite representation including said graphical 
representation and said data representation to enable 
simultaneous display of said pictorial representation and said at 
least some of said data. 

A graphical user interface for use in analyzing a communications 
network, comprising: 

a) receiving means for receiving data relating to said networi<; and 

b) display means for simultaneously displaying a pictorial 
representation of said networic in a first area of a display and a 
representation of at least some of said data relating to said 
network in a second area of a display, said first and second 
areas being separate from each other. 
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SLA DETAILS 


AUKEED: MARCH 09. IMS 


PELICAN TELECOM VPN SERVICE AGREEMENT 


PREPARED FOR CASPAR CORPORATION 
SERVICE: FRAME RELAY (SKPK TO NETWORK) 


/////////Amm 


SERVICE LEVEL//^ 


///PENALtY' 


MEAN TIME TO REPAIR (MHR) 


< 5 HOURS 


10% CREDIT 


MEAN TIME BETWEEN FAILURES IMTBF) 


> 3 DAYS 


10% CREDIT 


NETWORK AVAILABILITY 


99.7% 


1 MONTH CREDIT 


SERVICE AVAILABILITY 


99.5% 


1 MONTH CREDIT 


DIAL PORT AVAILABILITY 


99.5% 


1 WEEK CREDIT 


END-TO-END LATENCY 


< 150ms ROUND-TRIP 


1 WEEK CREDIT 


ERRORS 


,<0.8b%'///. 


,5% CREDIT ^/y 


PACKET LOSS 


<1% 


1 WEEK CREDIT 


DISCARDS 


<0.80% 


5% CREDIT 


NUMBER OF USERS SUPPORTED 


500 


1 WEEK CREDIT 
FOR EVERY 10 
USERS DROPPED 



FIG. 15 



